Risk management in general

Answer:
Risk management has four elements:

Risk Determination – determine risks about the system as a whole, about the processes and about the products or services delivered.

Prioritize Risks - Risks do not all have the same importance. Some will be more serious than others. It is necessary to arrange criteria for classifying and distinguishing the most serious risks from the least serious ones.

Mitigate Risks – Develop actions that minimize the consequences of the risks and or the likelihood of their occurrence.

Measure Effectiveness – Evaluate if the actions were effective in handling the priority risks.

Please check this free webinar on demand where I explain risk scope and risk management with examples. Free webinar – How to implement risk management in ISO 9001:2015 - https://advisera.com/9001academy/webinar/how-to-implement-risk-management-in-iso-90012015-free-webinar-on-demand//

The following material will provide you info rmation about risk management:
- ISO 9001 - How to address risks and opportunities in ISO 9001 - https://advisera.com/9001academy/blog/2016/06/21/how-to-address-risks-and-opportunities-in-iso-9001/
- free online training ISO 9001:2015 Foundations Course - https://advisera.com/training/iso-9001-foundations-course/
- book - Discover ISO 9001:2015 Through Practical Examples - https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/